Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4726414-477c-321f-8c0f-6da1244e2c41.roa
File:                     d4726414-477c-321f-8c0f-6da1244e2c41.roa (raw, json)
Hash identifier:          4mN+D0XFdGFQVdzx6tsWuP/s+1eERWVO5gCyBZmLHSo=
Subject key identifier:   23:6A:BC:80:A3:A2:E1:D8:5B:39:92:C0:B8:81:A6:23:52:63:E7:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C256F85F9BA8C159E0ACA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4726414-477c-321f-8c0f-6da1244e2c41.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396616
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:56:f8:5f:9b:a8:c1:59:e0:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=1f2a7d6d-b2ee-485f-994b-778116b04da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:fa:16:1d:8a:31:19:33:b1:d1:40:cb:0c:
                    a7:b8:ba:1f:a8:4c:45:ff:e2:74:8d:98:92:a7:a3:
                    c6:ec:3e:ba:5f:a6:d9:92:55:46:43:dc:f3:b4:00:
                    ab:80:bf:38:91:4b:7f:96:27:c2:15:6b:15:e6:03:
                    66:e6:e4:e8:14:80:5b:4a:8a:68:0d:23:4e:53:0a:
                    6e:e4:01:80:69:ce:6c:be:4e:3e:b8:b7:d4:35:cb:
                    ae:e5:fe:72:79:25:02:f9:33:6c:13:2d:38:89:c5:
                    c5:d6:c8:35:40:4f:18:da:df:d3:f3:0f:6a:8f:a4:
                    c3:41:33:77:55:38:a6:75:6a:ea:78:86:6d:25:ce:
                    15:5a:b8:00:fb:06:3d:22:9d:e1:4e:bb:6f:ce:52:
                    82:7e:32:e1:43:43:06:81:f1:03:cf:91:e9:06:67:
                    e2:5e:7b:af:99:e0:db:d2:69:e9:fe:42:ed:05:24:
                    84:37:5b:40:03:6d:69:e7:b1:23:89:28:33:d6:f5:
                    26:bd:85:d6:12:60:8f:9a:12:3a:72:f8:6b:6b:9f:
                    47:41:50:54:3f:6d:86:0c:fa:ea:dd:e6:e8:20:a5:
                    5d:ae:50:dd:91:ce:db:e4:e4:73:31:b7:e6:0d:0f:
                    96:54:9b:49:72:b0:ff:69:ae:8b:0f:48:19:b8:a4:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:BC:80:A3:A2:E1:D8:5B:39:92:C0:B8:81:A6:23:52:63:E7:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4726414-477c-321f-8c0f-6da1244e2c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:ee:09:71:06:09:03:61:91:ef:35:8a:ce:c7:05:1c:e8:
         84:e0:dd:d3:5c:19:dc:01:b4:c3:00:5d:3d:e0:5c:7b:66:f3:
         ac:27:9a:98:aa:ac:83:e7:d3:d4:27:12:a8:c8:12:df:ce:19:
         46:04:df:35:dc:7c:f3:0b:60:13:9c:e4:5a:bb:7f:f1:2f:c2:
         37:e8:35:14:a0:bb:2f:7a:91:f1:f1:1a:47:a1:ed:9b:f8:2f:
         af:a1:f7:82:0f:cc:1d:c8:6e:70:95:8a:02:89:91:9f:d8:f9:
         55:81:d4:8d:c9:98:ab:f6:9f:09:12:ca:a1:90:6d:f5:ba:bf:
         a1:15:16:9e:33:7f:86:6a:00:89:12:05:14:24:a7:a0:98:4c:
         c4:e1:53:89:be:e0:a4:04:fa:80:eb:81:bc:8b:8e:99:81:a7:
         65:c8:a2:91:f7:3d:56:ab:aa:77:b6:97:38:37:c7:8c:de:c7:
         c1:b0:40:09:2e:c4:eb:16:7e:90:05:db:6d:ef:6e:55:53:65:
         9f:94:ea:27:4d:18:77:14:99:78:06:5e:60:01:49:c0:b2:6c:
         21:39:45:8f:7b:21:44:78:3c:fe:3a:18:fb:73:7c:ae:48:71:
         ed:0f:ba:2b:f2:1f:0d:59:fc:d1:c1:98:55:4b:83:0c:6e:f8:
         a2:a6:3b:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlb4X5uowVngrKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
MWYyYTdkNmQtYjJlZS00ODVmLTk5NGItNzc4MTE2YjA0ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNb6Fh2KMRkzsdFAywynuLofqExF/+J0jZiS
p6PG7D66X6bZklVGQ9zztACrgL84kUt/lifCFWsV5gNm5uToFIBbSopoDSNOUwpu
5AGAac5svk4+uLfUNcuu5f5yeSUC+TNsEy04icXF1sg1QE8Y2t/T8w9qj6TDQTN3
VTimdWrqeIZtJc4VWrgA+wY9Ip3hTrtvzlKCfjLhQ0MGgfEDz5HpBmfiXnuvmeDb
0mnp/kLtBSSEN1tAA21p57EjiSgz1vUmvYXWEmCPmhI6cvhra59HQVBUP22GDPrq
3eboIKVdrlDdkc7b5ORzMbfmDQ+WVJtJcrD/aa6LD0gZuKQkSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNqvICjouHYWzmSwLiBpiNSY+c8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQ3MjY0MTQtNDc3Yy0z
MjFmLThjMGYtNmRhMTI0NGUyYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrE7glxBgkDYZHvNYrOxwUc6ITg3dNcGdwBtMMAXT3gXHtm86wnmpiq
rIPn09QnEqjIEt/OGUYE3zXcfPMLYBOc5Fq7f/EvwjfoNRSguy96kfHxGkeh7Zv4
L6+h94IPzB3IbnCVigKJkZ/Y+VWB1I3JmKv2nwkSyqGQbfW6v6EVFp4zf4ZqAIkS
BRQkp6CYTMThU4m+4KQE+oDrgbyLjpmBp2XIopH3PVarqne2lzg3x4zex8GwQAku
xOsWfpAF223vblVTZZ+U6idNGHcUmXgGXmABScCybCE5RY97IUR4PP46GPtzfK5I
ce0PuivyHw1Z/NHBmFVLgwxu+KKmOwQ=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:48:01 2026 by rpki-client